Bump the frontend-security-and-maintenance group across 1 directory with 21 updates by dependabot[bot] · Pull Request #48 · Shimizu-Technology/hafa-code

dependabot · 2026-09-19T14:35:47Z

Bumps the frontend-security-and-maintenance group with 21 updates in the /web directory:

Package	From	To
@ruby/3.3-wasm-wasi	`2.9.3-2.9.4`	`2.10.1`
@ruby/wasm-wasi	`2.9.3-2.9.4`	`2.10.1`
lucide-react	`1.26.0`	`1.49.0`
monaco-editor	`0.55.1`	`0.57.0`
pyodide	`314.0.3`	`314.0.7`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.17`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
typescript	`6.0.3`	`7.0.2`
@testing-library/react	`16.3.2`	`16.3.3`
@testing-library/user-event	`14.6.1`	`14.6.7`
@types/node	`24.13.3`	`26.6.3`
@types/react	`19.2.17`	`19.3.0`
@types/react-dom	`19.2.3`	`19.3.0`
@vitejs/plugin-react	`6.0.4`	`6.1.1`
eslint	`10.8.0`	`10.11.0`
eslint-plugin-react-refresh	`0.5.3`	`0.5.7`
globals	`17.7.0`	`17.12.0`
jsdom	`26.1.0`	`30.1.1`
typescript-eslint	`8.65.0`	`8.71.0`
vite	`8.0.16`	`8.3.1`
vitest	`4.1.11`	`5.0.3`

Updates @ruby/3.3-wasm-wasi from 2.9.3-2.9.4 to 2.10.1

Release notes

Sourced from @ruby/3.3-wasm-wasi's releases.

2.10.1

channel source

4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz

3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz

3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz

3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz

head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

2.10.0

channel source

4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz

3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz

3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz

3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz

head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

Commits

See full diff in compare view

Updates @ruby/wasm-wasi from 2.9.3-2.9.4 to 2.10.1

Release notes

Sourced from @ruby/wasm-wasi's releases.

2.10.1

channel source

4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz

3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz

3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz

3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz

head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

2.10.0

channel source

4.0 https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz

3.4 https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz

3.3 https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz

3.2 https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz

head ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c

Commits

See full diff in compare view

Updates lucide-react from 1.26.0 to 1.49.0

Release notes

Sourced from lucide-react's releases.

Version 1.49.0

What's Changed

feat(icons): added letters icon by @karsa-mistmere in lucide-icons/lucide#4779

fix(packages): declare @types/react as an optional peer dependency by @unrevised6419 in lucide-icons/lucide#4892

feat(icons): added bangladeshi-taka icon by @TanvirMahin24 in lucide-icons/lucide#4869

feat(icons): added printer-3d icon by @Azuzula in lucide-icons/lucide#4414

New Contributors

@unrevised6419 made their first contribution in lucide-icons/lucide#4892

@TanvirMahin24 made their first contribution in lucide-icons/lucide#4869

@Azuzula made their first contribution in lucide-icons/lucide#4414

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

Version 1.48.0

What's Changed

feat(icons): added briefcase-plus icon by @tylerkade in lucide-icons/lucide#4757

feat(icons): added square-sparkles icon by @nananecy in lucide-icons/lucide#3610

feat(icons): added line-dot-left-horizontal icon by @nathan-de-pachtere in lucide-icons/lucide#3855

fix(packages/svelte,solid): fix shared type imports in Solid and Svelte by @karsa-mistmere in lucide-icons/lucide#4846

chore(deps-dev): bump react-native from 0.76.9 to 0.87.1 in the react-native-deps group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4673

feat(packages): export __iconNode data across framework packages by @lx3133584 in lucide-icons/lucide#4761

fix(icons): Tweak card-sim chip by @danielbayley in lucide-icons/lucide#3649

feat(icons): added line-dot-top-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3856

feat(icons): added line-dot-bottom-vertical icon by @nathan-de-pachtere in lucide-icons/lucide#3857

fix(packages/react-native): pass testID to the rendered Svg element by @OlegBezr in lucide-icons/lucide#4881

chore(@lucide/vue): Fix types @lucide/vue package and added workflow for it. by @ericfennis in lucide-icons/lucide#4883

test(packages/shared): cover buildLucideIconForReact by @vugarbbakhishov-hub in lucide-icons/lucide#4872

feat(site): Better icon detail page and add unreleased flag by @ericfennis in lucide-icons/lucide#4877

fix(icons): changed map-pinned icon by @jguddas in lucide-icons/lucide#4880

fix(icons): changed mail-pen by @karsa-mistmere in lucide-icons/lucide#4899

chore(deps-dev): bump the angular-deps group across 1 directory with 14 updates by @dependabot[bot] in lucide-icons/lucide#4895

chore(deps): bump the vue-deps group with 3 updates by @dependabot[bot] in lucide-icons/lucide#4893

chore(typchecking): More typecheck jobs for all packages by @ericfennis in lucide-icons/lucide#4885

feat(icons): add house-cog icon by @ajaxjiang96 in lucide-icons/lucide#4904

New Contributors

@nananecy made their first contribution in lucide-icons/lucide#3610

@OlegBezr made their first contribution in lucide-icons/lucide#4881

@vugarbbakhishov-hub made their first contribution in lucide-icons/lucide#4872

@ajaxjiang96 made their first contribution in lucide-icons/lucide#4904

Full Changelog: lucide-icons/lucide@1.47.0...1.48.0

Version 1.47.0

What's Changed

feat(icons): add lambda icon by @UbaidUllah9962 in lucide-icons/lucide#4017

feat(icons): delegated faucet icon from lab by @karsa-mistmere in lucide-icons/lucide#4764

feat(icons): added door-closed-package icon by @karsa-mistmere in lucide-icons/lucide#4814

feat(icons): added 'nepali-rupee' icon by @sarajdhakal in lucide-icons/lucide#4608

... (truncated)

Commits

e042fec fix(packages): declare @types/react as an optional peer dependency (#4892)
f06ac67 chore(typchecking): More typecheck jobs for all packages (#4885)
94e4cb9 chore(dependencies): Update dependencies (#4806)
99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
See full diff in compare view

Updates monaco-editor from 0.55.1 to 0.57.0

Release notes

Sourced from monaco-editor's releases.

v0.57.0

Changes:

#5487: Prepare Monaco Editor 0.57.0 release

#5415: Bump uuid and webpack-dev-server in /website

#5476: Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website

#5474: Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel

#5479: Bump actions/deploy-pages from 5.0.0 to 5.0.1 in the github-actions group

#5468: Bump browserslist from 4.28.1 to 4.28.8 in /website

#5475: Bump js-yaml from 4.3.1 to 4.3.2

#5470: Bump fast-uri from 3.1.2 to 3.1.7 in /webpack-plugin

#5469: Bump nanoid from 3.3.11 to 3.3.18 in /webpack-plugin

#5467: Bump fast-uri from 3.1.5 to 3.1.7 in /samples/browser-esm-webpack-typescript-react

#5466: Bump fast-uri from 3.1.2 to 3.1.7 in /samples

#5465: Bump fast-uri from 3.1.4 to 3.1.7 in /website

#5463: Bump postcss-selector-parser from 7.1.0 to 7.1.5 in /website

#5416: Bump @babel/core from 7.17.8 to 7.29.7 in /samples/browser-esm-vite-react

#5438: Bump electron from 39.8.5 to 39.8.10 in /samples

#5460: Bump the github-actions group with 7 updates

#5456: Pin GitHub Actions to full-length commit SHAs

#5450: Bump postcss from 8.5.12 to 8.5.26

#5449: Bump js-yaml from 4.2.0 to 4.3.1

#5439: Bump postcss from 8.5.13 to 8.5.26 in /samples

#5441: Bump postcss from 8.5.15 to 8.5.26 in /samples/browser-esm-vite-react

#5432: Bump undici from 7.28.0 to 7.29.0

#5440: Bump brace-expansion in /website

#5436: Bump fast-uri from 3.1.4 to 3.1.5 in /samples/browser-esm-webpack-typescript-react

#5437: Bump fast-uri from 3.1.2 to 3.1.5

#5413: Bump svgo from 2.8.2 to 2.8.3 in /samples/browser-esm-parcel

#5419: Bump launch-editor from 2.12.0 to 2.14.1 in /website

#5414: Bump fast-uri from 3.1.2 to 3.1.4 in /samples/browser-esm-webpack-typescript-react

#5417: Bump minimatch from 3.1.2 to 3.1.5 in /webpack-plugin

#5420: Bump ws from 8.18.0 to 8.21.1 in /samples

#5418: Bump http-proxy-middleware from 2.0.9 to 2.0.10 in /samples

#5412: Bump fast-uri from 3.1.2 to 3.1.4 in /website

#5411: Bump shell-quote from 1.8.4 to 1.10.0 in /website

#5409: Bump webpack-dev-server from 5.2.5 to 5.2.6 in /samples

#5410: Bump postcss from 8.5.14 to 8.5.23 in /website

#5407: Bump immutable from 5.1.5 to 5.1.9 in /website

#5401: Bump brace-expansion from 1.1.11 to 1.1.16 in /samples

This list of changes was auto generated.

v0.57.0-rc.2

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.57.0]

New Features and APIs

Adds editor.wordWrapIndicator to display an indicator at the wrapping column of soft-wrapped lines.

Adds editor.fullwidthCharacterWidth, with font and twoCells modes for rendering full-width characters.

Adds languages.score to score a language selector against a URI and language.

Exports the editor.DiffEditorViewMode type.

Adds isForAnotherDocument to the inline completion languages.LifetimeSummary type.

Updates

Updates the editor core to VS Code commit 6a598d4a13031703d483d103c1d934a36ad27971, validated in 0.57.0-rc.2.

Updates bundled DOMPurify from 3.4.8 to 3.4.15.

[0.56.0]

Breaking Changes

Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:

all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;

all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;

the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.

Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.

Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

Adds editor.doubleClickSelectsBlock.

Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.

Adds offWhenInlineCompletions to QuickSuggestionsValue.

Adds model and provider option support to inline completion providers.

Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.

Adds advanced-external and advanced-wasm diff algorithms.

Exposes typed native LSP client and transport APIs.

Fixes

Treats Markdown returned by language servers as untrusted (#5280).

Updates the editor core to the version used by 0.56.0-dev-20260625.

Commits

d618242 Merge pull request #5487 from microsoft/hediet/b/release-0.57.0
ef061ff Prepare Monaco Editor 0.57.0 release
8e9b0f7 Keep editor release version stable across task retries
3f31304 Prepare VS Code native headers before installing dependencies
ebd1312 Use authenticated Foundry Local installer for core builds
176408b Align release build Node version with VS Code 1.139
97d81ca Bump uuid and webpack-dev-server in /website (#5415)
f7c7f4c Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website (#5476)
36f4fe6 Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel (#5474)
f24cd7f Bump actions/deploy-pages in the github-actions group (#5479)
Additional commits viewable in compare view

Updates pyodide from 314.0.3 to 314.0.7

Release notes

Sourced from pyodide's releases.

314.0.7

See changes at https://pyodide.org/en/stable/project/changelog.html#version-314-0-7

314.0.6

See changes at https://pyodide.org/en/stable/project/changelog.html#version-314-0-6

314.0.5

Changelog: https://pyodide.org/en/stable/project/changelog.html#version-314-0-5

314.0.4

No release notes provided.

Commits

b1e4fcc 314.0.7
6af9618 314.0.7
3f0c488 Rearrange changelog for 314.0.7 (#6453)
15ae90d Update packages set to 20260911 (#6452)
382aab8 Add a dedent option to runPython and runPythonAsync (#6448)
df21082 Fix test-js job on pull requests from forks (#6449)
29ceaf5 Add Pyodios iOS app to related projects list (#6446)
0620dd0 Update cross-build metadata files for version 314.0.6 (#6441)
8cec1b9 314.0.6
a05d150 314.0.6
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon

netlify · 2026-09-19T14:35:56Z

❌ Deploy Preview for hafa-code failed.

Name	Link
🔨 Latest commit	`53190a9`
🔍 Latest deploy log	https://app.netlify.com/projects/hafa-code/deploys/6ac19843bcf7f400085c923f

coderabbitai · 2026-09-19T14:36:08Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 2dfe837a-5f64-4919-a136-ad866d4ab643

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

…ith 21 updates Bumps the frontend-security-and-maintenance group with 21 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [@ruby/3.3-wasm-wasi](https://github.com/ruby/ruby.wasm) | `2.9.3-2.9.4` | `2.10.1` | | [@ruby/wasm-wasi](https://github.com/ruby/ruby.wasm) | `2.9.3-2.9.4` | `2.10.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.26.0` | `1.49.0` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.57.0` | | [pyodide](https://github.com/pyodide/pyodide) | `314.0.3` | `314.0.7` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.7` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.6.3` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.1.1` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.11.0` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.7` | | [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.12.0` | | [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.1.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.71.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.3` | Updates `@ruby/3.3-wasm-wasi` from 2.9.3-2.9.4 to 2.10.1 - [Release notes](https://github.com/ruby/ruby.wasm/releases) - [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1) Updates `@ruby/wasm-wasi` from 2.9.3-2.9.4 to 2.10.1 - [Release notes](https://github.com/ruby/ruby.wasm/releases) - [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1) Updates `lucide-react` from 1.26.0 to 1.49.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.49.0/packages/lucide-react) Updates `monaco-editor` from 0.55.1 to 0.57.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.55.1...v0.57.0) Updates `pyodide` from 314.0.3 to 314.0.7 - [Release notes](https://github.com/pyodide/pyodide/releases) - [Commits](pyodide/pyodide@314.0.3...314.0.7) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `@testing-library/react` from 16.3.2 to 16.3.3 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3) Updates `@testing-library/user-event` from 14.6.1 to 14.6.7 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.1...v14.6.7) Updates `@types/node` from 24.13.3 to 26.6.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.17 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 6.0.4 to 6.1.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.1/packages/plugin-react) Updates `eslint` from 10.8.0 to 10.11.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.11.0) Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.7 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.7) Updates `globals` from 17.7.0 to 17.12.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.7.0...v17.12.0) Updates `jsdom` from 26.1.0 to 30.1.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v26.1.0...v30.1.1) Updates `typescript-eslint` from 8.65.0 to 8.71.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint) Updates `vite` from 8.0.16 to 8.3.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite) Updates `vitest` from 4.1.11 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: "@ruby/3.3-wasm-wasi" dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@ruby/wasm-wasi" dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@testing-library/react" dependency-version: 16.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: "@testing-library/user-event" dependency-version: 14.6.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: "@types/node" dependency-version: 26.6.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: eslint dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: globals dependency-version: 17.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: jsdom dependency-version: 30.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance - dependency-name: lucide-react dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: monaco-editor dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: pyodide dependency-version: 314.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance - dependency-name: typescript-eslint dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: vite dependency-version: 8.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 19, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/web/frontend-security-and-maintenance-69532f0e99 branch from 532e3f3 to 6742556 Compare October 3, 2026 14:34

dependabot Bot force-pushed the dependabot/npm_and_yarn/web/frontend-security-and-maintenance-69532f0e99 branch from 6742556 to 53190a9 Compare October 4, 2026 00:05

Navigation Menu

Bump the frontend-security-and-maintenance group across 1 directory with 21 updates - #48

Bump the frontend-security-and-maintenance group across 1 directory with 21 updates#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-69532f0e99

dependabot Bot commented on behalf of github Sep 19, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 19, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 19, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

channel	source
4.0	https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.0.tar.gz
3.4	https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.1.tar.gz
3.3	https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz
3.2	https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.4.tar.gz
head	`ruby/ruby@34f041ca05502690b2eb988001917a457c5d7b4c`

Conversation

dependabot Bot commented on behalf of github Sep 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.10.1

2.10.0

2.10.1

2.10.0

Version 1.49.0

What's Changed

New Contributors

Version 1.48.0

What's Changed

New Contributors

Version 1.47.0

What's Changed

v0.57.0

Changes:

v0.57.0-rc.2

[0.57.0]

New Features and APIs

Updates

[0.56.0]

Breaking Changes

New Features and APIs

Fixes

314.0.7

314.0.6

314.0.5

314.0.4

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

netlify Bot commented Sep 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for hafa-code failed.

Uh oh!

coderabbitai Bot commented Sep 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 19, 2026 •

edited

Loading

netlify Bot commented Sep 19, 2026 •

edited

Loading

coderabbitai Bot commented Sep 19, 2026 •

edited

Loading